gosec: record why six rule classes stay excluded #633

New issue

Open

opened 2026-09-24 19:39:16 +00:00 by hexajon · 0 comments

hexajon commented

2026-09-24 19:39:16 +00:00

Owner

What

scripts/gosec.sh excludes six rule classes: G204, G301, G302, G304, G306, and G704. The reasons live only in the script header, with no decision record.

With the error handling from #623 in place, gosec reports these hits in the six classes: G204 15, G301 8, G302 3, G304 46, G306 12, and G704 2.

Fix

A decision record in docs/decisions for the six classes: for each class, every current site and why it is safe.
The scripts/gosec.sh header points at the record.

Acceptance

The record exists and lists every site of each class with its reason.
The scripts/gosec.sh header points at the record.
adr check passes.

## What `scripts/gosec.sh` excludes six rule classes: G204, G301, G302, G304, G306, and G704. The reasons live only in the script header, with no decision record. With the error handling from #623 in place, gosec reports these hits in the six classes: G204 15, G301 8, G302 3, G304 46, G306 12, and G704 2. ## Fix - A decision record in `docs/decisions` for the six classes: for each class, every current site and why it is safe. - The `scripts/gosec.sh` header points at the record. ## Acceptance - The record exists and lists every site of each class with its reason. - The `scripts/gosec.sh` header points at the record. - `adr check` passes.

hexajon added the

security

label

2026-09-24 19:39:16 +00:00

hexajon referenced this issue

2026-09-24 19:39:29 +00:00

gosec: handle every error #623

hexajon added a new dependency

2026-09-24 19:40:15 +00:00

#623 gosec: handle every error

hexajon referenced this issue

2026-10-13 22:23:04 +00:00